Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersGrav's Twig processing allowing dangerous PHP functions by default
After order payment process manipulation in shopware/platform and shopware/core
Exposure of .env if project root is configured as web root in shopware/production
Leak of information via Store-API aggregations in shopware/platform and shopware/core
User (Encrypted) Password Field Being Serialised
Potential XSS injection in the newsletter conditions field
Mautic vulnerable to secret data exfiltration via symfony parameters
Privilage Escalation in moodle
Stored cross-site scripting in PressBooks
Denial of Service in Page Error Handling
Unrestricted File Upload in Form Framework
Cleartext storage of session identifier
Cross-site scripting in eZ Platform Kernel
drupal/fac - SA-CONTRIB-2021-005
BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API
Authenticated remote code execution
Potential Session Hijacking
/user/sessions endpoint allows detecting valid accounts
/user/sessions endpoint allows detecting valid accounts
October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers
drupal/webform - SA-CONTRIB-2021-004
October CMS Session ID not invalidated after logout
Exposure of Sensitive Information to an Unauthorized Actor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.